Niek Otten 5d32d4f15e test(bff): acceptance scenario for BFF access (valid/invalid tokens) (refs #8) ...

Use-case-level BDD (Reqnroll) driving the real BFF over HTTP with fake downstreams
and locally-minted tokens: a valid DigiD token is accepted and the bsn forwarded
to the domain; a tokenless submit is 401; the openbaar register is anonymous and
never exposes the bsn (ADR-0010). Real Keycloak validation is the verify-bff check.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-01 11:03:37 +02:00

1.1 KiB

Raw Blame History

View Raw